Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Share Post: Reddit Facebook
Rietspoof malware spreads via Facebook Messenger and Skype spam
#1
Quote:Avast researchers spot new malware spreading via instant messaging clients.
Avast security researchers have discovered a new malware strain named Rietspoof that's currently being spread to victims via instant messaging clients such as Facebook Messenger and Skype.

In a report published over the weekend, researchers described this new threat as a "multi-stage malware," that was first spotted in August 2018, but which was largely ignored until a noticeable uptick in distribution efforts last month.

Rietspoof's main role is to infect victims, gain persistence on infected hosts, and then download other malware strains --depending on the orders it receives from a central command & control (C&C) server.
Persistence is gained by the malware by placing an LNK (shortcut) file in the Windows /Startup folder. This is a noisy operation because most antivirus products know to keep an eye on this folder, but Avast says Rietspoof is also signed with legitimate certificates, allowing the malware to bypass security checks.

The infection routine is made up of four different stages --described in greater detail in the Avast write-up here. The actual Rietspoof malware is dropped in stage three, with the last stage being reserved for downloading a more intrusive and potent malware strain.

VirusTotal

SOURCE
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  Android malware infected 300,000 devices to steal Facebook accounts tarekma7 0 466 12-05-2022 , 04:04 PM
Last Post: tarekma7
  Anonymous urges Internet users to spam Google Maps, Bjyda 0 1,490 03-01-2022 , 09:13 PM
Last Post: Bjyda
  Ryuk ransomware now self-spreads to other Windows LAN devices mrtrout 0 814 02-26-2021 , 09:40 PM
Last Post: mrtrout
  Facebook Messenger Phishing Scam Is Letting Hackers Into Accounts, Here’s How dhruv2193 1 1,278 01-04-2021 , 08:30 AM
Last Post: tarekma7
  Body Found in Canada Identified as Neo-Nazi Spam King mrtrout 0 1,204 11-12-2020 , 02:35 AM
Last Post: mrtrout

Forum Jump:


Users browsing this thread: 1 Guest(s)